Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
File:                     v_tlOi9T2WcLP5GEAgnz8seKwbI.mft (raw, json)
Hash identifier:          9nHMoSvxRQULBq7TKo0O4/igEvDj0i7cjlsHvDCY6go=
Subject key identifier:   B4:81:21:AD:77:16:F5:4F:A7:D0:3C:06:E7:7D:93:69:3E:1B:AB:92
Authority key identifier: BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
Certificate issuer:       /CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Certificate serial:       0196C9172B7F35499FB85D1ABC3D29D51725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
Manifest number:          1538
Signing time:             Tue 13 May 2025 10:01:00 +0000
Manifest this update:     Tue 13 May 2025 10:01:00 +0000
Manifest next update:     Wed 14 May 2025 10:01:00 +0000
Files and hashes:         1: v_tlOi9T2WcLP5GEAgnz8seKwbI.crl (hash: x7q6SWiQ07jR6LDV5GLS5ao0GZKb3r4s8AEWa1EeQzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:17:2b:7f:35:49:9f:b8:5d:1a:bc:3d:29:d5:17:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
        Validity
            Not Before: May 13 10:01:00 2025 GMT
            Not After : May 14 10:01:00 2025 GMT
        Subject: CN=b48121ad7716f54fa7d03c06e77d93693e1bab92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:ee:44:76:7f:9e:26:4c:fa:43:32:6d:84:
                    f6:66:79:12:9d:0e:c4:91:fb:8f:3f:03:a7:17:60:
                    e4:c4:ae:57:4d:41:d6:cd:25:a2:4d:db:65:e3:66:
                    90:a0:31:bd:98:b3:0e:f1:fc:55:ea:66:a1:7d:b8:
                    89:d9:88:f3:6a:57:20:c6:99:3e:ca:f4:b8:9e:ff:
                    97:4c:5f:f8:5f:68:44:e0:66:60:c6:95:de:02:76:
                    a9:44:eb:c7:ca:2a:a9:00:d8:a3:c6:64:36:27:2a:
                    c1:74:37:9f:d1:5f:d4:85:e4:66:68:cc:4c:de:b0:
                    e3:c9:7e:6c:a4:81:ca:e1:c9:cb:72:a3:5c:58:a1:
                    22:32:26:ca:94:43:1b:d6:ef:9a:a1:30:a1:86:9b:
                    0e:0f:47:fb:26:75:72:23:d4:b0:71:b1:29:78:1d:
                    b5:07:27:46:5a:50:8e:32:3b:6b:db:29:28:00:7d:
                    fe:b8:a1:f8:a5:54:36:fd:ca:44:b4:5a:29:6f:64:
                    28:96:22:fc:41:81:21:6c:c2:de:73:2d:5a:fe:5e:
                    40:35:cd:65:2e:6f:88:46:24:3b:29:a8:20:7f:87:
                    eb:2d:09:61:67:31:d7:b0:10:cb:8f:ab:ac:c0:6c:
                    ef:28:7d:bd:71:c7:7e:9a:16:ba:68:b5:dc:6a:1c:
                    15:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:81:21:AD:77:16:F5:4F:A7:D0:3C:06:E7:7D:93:69:3E:1B:AB:92
            X509v3 Authority Key Identifier:
                keyid:BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b2:27:84:14:6a:0c:6e:c3:32:74:4c:70:f0:66:3e:db:f7:
         e3:93:12:cd:fd:47:d3:91:90:3d:86:fa:d0:28:e0:e4:65:86:
         0f:d7:9d:1a:8c:22:84:e3:d2:0e:38:c9:41:44:cd:9f:94:86:
         57:67:eb:94:15:27:1d:3f:76:b8:0c:cc:d2:55:87:3d:86:89:
         d8:dc:c9:50:cb:4e:bd:b1:ed:1e:93:4b:ed:04:56:ea:0c:7a:
         01:ba:a8:58:f1:d6:7e:c5:ad:12:d0:e7:32:88:c3:e3:ad:a8:
         31:26:2e:d6:0b:c4:71:6a:79:5e:2c:5d:7a:28:c9:9a:df:7d:
         3b:28:32:b9:cb:56:8d:e0:db:fe:3e:72:7e:2b:46:e9:21:9e:
         28:3d:3a:9d:67:49:8c:5d:19:14:dc:6d:07:0b:0f:24:4b:11:
         c9:9e:39:60:a5:64:cd:d2:f5:f8:e4:46:09:3e:a0:b7:cc:3c:
         89:1e:3f:2b:4f:ab:96:31:f6:02:bf:b0:1a:3a:ce:44:ff:74:
         b2:ed:77:fd:66:9a:93:94:10:05:61:7a:f7:ec:c7:8c:ae:d8:
         f7:4e:99:11:2c:cf:cb:f6:51:85:bc:a7:d6:3b:db:38:73:be:
         69:7e:02:7a:91:c5:49:8a:07:9e:76:26:94:8e:29:76:95:81:
         ad:e9:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----